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DAVID T. CRAIG 
Annle Lisa 7/7 Tool Deserialization 


David Craig [736 Edgewater, Wichita Kansas 67230] 


Tool Theft Protection Introduction 


The Apple Lisa computer provides a mechanism to hinder software piracy of Lisa tools. 
This mechanism, known as software serialization, utilizes the unique serial numbers 
which are built into every Lisa. The first time a tool is to be used on a Lisa the user 
must install the tool. Installation involves inserting the diskette with the tool into the 
Lisa's diskette drive and duplicating the tool icon onto the Lisa’s hard disk. Vehen the 
duplication action begins the following dialog appears (for a LisaCalc installation); 


The Lisa is about to make the first copy of 


LisaCatc. This copy, and all future copies, can be 
used only on this Lisa. 


Is that what you want? 


Once you click Copy, you will not be able to f ( } 
change your mind, even by choosing Unde. eis ie 


If the Copy button is selected, then the tool will be made into a Master tool. Copies of 
the master tool will work only on the first Lisa that was used to make the copy of the 
raster. The master tool diskette itself will function on any Lisa. Each Lisa requires its 
own master tool ta make copies and backups. If auser attempts to use 4 tool which was 
previously used on a different Lisa, then the following dialog appears; 


"LisaCalc Paper 03/19" cannot be displayed 
because this copy of the Lisalalc tool is not 
licensed For use on this Lisa. 
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(Internal Drivel 


Buff: GOOd a 
Sect: 0020 # 
Tags: 0002 0100 FFFS 0000 OFF O7FF 

0000: O77B 5433 7D6F 626A 0000 0000 0000 0000 =. {T3}obj........ 

0010: 9000 0000 dN00 O000 9000 ODD0 0000 0000, 

0020: OOF? SCF9 BAZF 0501 008 0015 OEGD OCFQ |... Peed ons 

0030: B503 AOC 160C O0F9 BEA: O00 OCOD OND... 
0040: 0000[0000 0000]0000 0101 0000 0000 0000... 
0050: C000 DOOD GOA ~~~ sem) 5403 5400 OCDD oe 


760 ONAN Aer: Tar nA ae 


Tool information block before installation 


The bytes in positions $42—$45 contain the serial nurriber of the Lisa on which the taal 
was installed. The above figure contains a serial nurnber af 0 (zero). When the tool is 
installed on 4 Lisa, the Lisa's serial number will be stored in the toal inforrnation Block 
at position $42—$45. After installing LisaCalc on my computer, the tool information 
block changed as follows; 


(Internal Drive) 


Buff: GO000 

Sect: 0020 

Tags: 0002 0100 FFFS 0000 9668 86ED 

G000: 0778 5433 7D6F 626A 0000 0000 O6n00 nodD J{T3}obj 
0010: 0000 0000 0000 9000 0000 0000 0000 DODGStiwtwtiw 
0020: OOF? SCF9 BR2F 0501 0OR8 0015 OEOO SFO Piers vege 
0030: BS03 A40C 213A 3CFO BB2c 0000 0000 0000 eee 
0040: 000 [O00T 157} 0000 0101 0000 0000 OOOO ke. 


0050: 0000 0000 CON “"°" ITO) 5403 5400 OC00 2a re el ae 
anee NAAN AADM ° NOOC O0G0 0001 AN cs tee 
= NAN AMES 


Tool information block after installation 


My Lisa has the serial number 70,935 which is equivalent to $00011517. When a Lisa 
attempts to use 4 tool it first checks the tool's serial nurnber from the toal information 
block against the Lisa's unique cerial number. If the serial numbers match, than the toal 
can be used. If the serial numbers do not match then the Lisa inforrns the user with a 
dialog that the tool is not licensed for this Lisa. 


Let's say you have a Lisa with the serial number 75,536 ($00012538). To find the serial 
number of your Lisa, select the Preferences tool icon and select the File/Print menu 
command "Attributes of ...". The serial number will be shown in the Information box. 
Use FEdit to modify positions $42—$45 to your hexadecimal serial number. After 
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writing the modified black to your diskette you can now install the tool on your Liga. For 
serial number 75,536 the modified block appears as follows; 


(internal Drive) 


Burtt: 0000 

Sect: 0020 

Tags: 0002 0100 FFFS 0000 9E68 36E0 

0000: O77B 5433 ?7D6F 626A 0000 0000 0000 0000 AT3}obj 0... 
6010: 0000 0000 O000 0900 0000 0000 0000 OOOO 2... 
0020: GOOF? SCFO BA2F 0501 GOAS OO15 OE0O 9CFG Phi haeiee 
0030: B503 A40C 213R 9CF9 BB2C 0000 0000 0000 Uae ened 
0040: 0000 [0001 2538]0000 0101 GG00 0000 GUO, 


0050: 0000 0000 O00“? 900 5403 3400 0000 ae onbals « 
eere ANA AANA * N00C 0000 60G1 2 Re bbot 
“AA free 


Tool information block after serial number modification 


To make a deserialized master tool diskette modify the serial number positions to all 
zeros ($00000000). 


This document in na way advacates the use of deserialization to steal Lisa software. 
This information should only be used on toals which you own. | have used this information 
on a Lisa 7/7? package which | bought, but which had been used on another Lisa which was 


sold back to Apple in a trade-in program. After deserializing this 7/7 package | could 
use the toals an my Lisa. 


QQQ The End QO0 


(1988) Apple Lisa 7/7 Deserialization 4at4 
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é Apple Lisa Computer Information é 


Apple Lisa Personal Computer 
1983 - 1985 


Unprotecting Apple Lisa Office System Tool Files 


David T. Craig - 21 February 1993 
736 Edgewater, Wichita, Kansas 67230 


This document contains some technical information relating to the Apple Lisa personal 
computer. The information in this document describes a procedure that unprotects a 
protected Lisa tool program. For an earlier discussion of this topic see my document 
Apple Lisa 7/7 Tool Deserialization (1988). 


A protected Lisa tool is a tool that can not be copied nor opened on another Lisa except by 
the Lisa Office System's Desktop Manager which created the “protected master”. Even the 
Lisa Workshop development environment can not open a protected tool file. 


WARNING 


The following procedure may be hazardous to the health of the disk on which 
it is applied. As such, backup the disk first. then follow this procedure on 
the COPY, not the original. 


The easiest way to unprotect a tool is to modify an certain area of its floppy disk. The 
Macintosh program FEdit is very handy for this process. The disk modification applies to a 
disk area containing the tool’s file system information. A tool has a name with the 
format “{Tx}OBJ” where “x” is a number (eg: LisaWrite has the name “{T!}OBu}". The 
tool’s name must begin at the beginning of a sector (preceeded with a length byte). 
Basically all you need to do is: 


Mount the Lisa tool disk with FEdit on a Macintosh. 

Locate the area holding the tool name and its file system information. 

Tell FEdit to let you modify a disk section. 

Clear (ie set to ZERO) aournd 40 bytes after the tool name. 

Save the changes to the modified disk sector. 

On a Lisa, run the Workshop (or Office System) and SCAVENGE the disk [OPTIONAL]. 


own BWNH 


You should now have an unprotected disk copy of a Lisa tool disk. 


--- End of Document --- 
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Deserializing the Lisa Office System 3.0 Disk 1 
David T. Craig - May 1993 


736 Edgewater, Wichita, Kansas 67230 - (316) 733-0914 
10700 Academy Road NE, Apt. 922, Albuquerque, New Mexico 87111 - (S05) 299-0308 


This document describes how to deserialize the Lisa computer's Office System 
disk number |. This disk is used by Lisa computer owners to install Apple’s 
Office System software, release 3.0 which is also called "Lisa 7/7”. 
Deserializing a disk makes the disk usable on Lisas other than the original Lisa 
which was first used to install the Office System software. 


1 used the Macintosh application FEdit 3.0 to deserialize the Office System disk 


WARNING 


You should make a copy of the Office System disk 1 before attempting 
this deserialization since this document describes a technique that can 
easily damage the Office System disk beyond all hope. A good 
Macintosh application that copies Lisa disks is Apple's “Disk Copy 4.2” 
application (dated 1991). 


The deserialization technique basically consists of changing several bytes on the 
Office System disk so that the disk appears to the Lisa as a “virgin master”. A 
virgin master disk can be installed on any Lisa. But once installed a virgin 
master becomes a "serialized master” which can only be used on the Lisa which 
installed it first. A serialized master has the Lisa’s unique serial number written 
to it (see the last page for Lisa serial number information). 


6 Lisa: Deserializing the Lisa Office System 3.0 Disk 1 (DTC - May 1993) 1 
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Run FEdit on your Macintosh and perform the following steps: 


0) 


1) 


2) 


3) 


4) 


5) 


8) 


7) 


8) 


9) 


10) 


Press the mouse button in FEdit’s introduction window to remove the window from 
the screen. 


Insert the Office System 1 disk into a Macintosh disk drive. FEdit displays a 
dialog stating that the disk is not a Macintosh disk and asks If the disk should be 
mounted or ejected. Select the MOUNT button. 


Select OPEN VOLUME from the FILE menu. Press the dialog's DRIVE button until 
the “internal drive” message appears. Select the dialog's OPEN button. You should 
see a window titled “internal drive” and showing a bunch of stuff in the window. 


Select DISPLAY SECTOR IN HEX from the DISPLAY menu. The “internal drive” 
window should now show an orderly arrangement of numbers 0 to 9 and letters A 
to F on the left (1 call this the “hex area” since it contains hexadecimal numbers) 
with characters on the right (called the “character area’). See the attached 
screen image at the end of this document for a sample of this window. Note that 
the window's top contains several lines, one of which reads “Sect: 0°. This means 
sector 0. 


Select the window's horizontal scroltbar “page right” arrow until the SECTOR 
information at the top of the window changes to “I1C* (hex for 28). 


Select HEX MODIFY from the EDIT menu. ~“""* Hex modify active *"*" should 
appear in the menubar. 


Use the mouse to click on byte at location $CC (hex) in the window. This byte 
will be located in the row labeled CO and four bytes from the right of the 
window's hex area edge. In the sample window figure this byte contains the value 
00, the three bytes to its right contain 011517 (hex). 


Change the bytes at locations $CC to $CF to be all zeros. Just type the zeros using 
the Macintosh keyboard. 


Verify very carefully that you have only changed the four bytes. !f you 
change any other bytes by mistake quit FEdit and start over. 


Select WRITE SECTOR in the EDIT menu. Answer in the affirmative to FEdit’s 
question about writing the sector back to the disk. 


Quit FEdit using the QUIT command in the FILE menu. 


@ Lisa: Deseriatizing the Lisa Office System 3.0 Disk 1 (DTC - May 1993) 2 
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Now you should have an Office System disk that can be used to install the Lisa 
Office System on your Lisa. 


NOTE : The numbers at locations $CC-$CF contain the serial number of the Lisa 
which was used first to install the Office System software. My Lisa has serial 
number 70,935 which is the same as the hex number $00011517. In general, the 
serial number at locations $CC-$CF should be below 100,000 (around hex 
$00012000) since Apple never produced more than 100,000 Lisa computers. 


NOTE : This technique can also be applied to the Lisa Workshop 3.0 disk 1 which 
also contains the originally installed Lisa's serial number in sector $1C. 


NOTE : From the Lisa Office System you can determine your Lisa’s serial number 
using the "Attributes" command in the Fite menu after selecting the Lisa's 
Preferences tool. 


NOTE : See my earlier paper titled "Apple Lisa 7/7 Tool Deserialization” (1988) 
for details about how to deserialize specific Lisa tools (eg LisaCalc). 


SSS (internal Drive) 


: 0000 

: 001C 

: Q000 3FOO GO01 G00 4FFF O7FF 

: 0011 SCF9 CF89 0701 ORS 0000 134F 6666 
: 6963 6520 5379 7374 656D 2031 2033 2E30 
: 852E OOF? BB96 COBS 957B BB?4 0000 6F62 
: 6AB2 GAO GIF? GCO1 QOF? CGO! GOBS S6CE 
> 9000 7CCE 0000 0001 GO80 BND1 DOCC 8536 
: 0001 DORE 0000 0000 9CF9 E014 0000 D000 
: A347? 2009 9CF9 E182 0000 G02 0000 001C 
: 0000 O31F G60 6203 Gadd 0320 218 0200 
: 0001 0000 9000 013A D000 0001 0000 0304 
: 0061 0001 9000 0002 0024 0002 0005 001D 
: 0047 9001 0000 0501 0180 O00 BODO 0D54 
: QOIC G00 O05 cA00 OOO FFFF FFE 0004 
: 0047 OIF? SESE 9026 1101 1563]po1 1517 | 
: OOOF 0004 721B 25F1 C334 1004 92FE 201E 
: F822 10F8 2390 FA20 CO20 FFFF FFFF FFFF 
> FFFF FFFF FFF FFFE FFFF FFFF FFFF FFFF 
: FRFF FFFF FFFF FFFF FFF FFFF FFFF 004C 
: CEEQ 0000 0080 0000 0000 0000 G000 0000 
: 0080 000A 0000 0000 9000 G000 OCD 0000 


UE BOUNDED NumBERS SHOLLD 
PE ZERO AFTELCPESRIALI CATION 


Diagram of FEdit window showing Office System Disk 1 sector $1C BEFORE deserialization 


--- End of Document --- 
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Ore na/ anther} 2 
Medstied by : David Cray, 736 Llygewater, Wichita KS 67230 


To de-serialize fe Aiication® 

Clear byte 42 (hex) in each Tool directory entry. (Tools are named (T1)obj, 
{T2]obj, etc.) | use FEdit. These directory entries follow a condensed 
directory which just list file names. These are one sector per tool, with 
the desk-top name later in the bottom half of the sector. As you can see, 
LisaWrite j# should be on sector 45 (2D hex). Need | say, make XLCopy 
copies of {hese guys BEFORE doing anything, and de~seriatize the COPY 


ony/1 


| have tried to include some other fields that } can ID. DO you know more’? 


Flags - 71st bit Master Orig sys Ser * 


Time Stamps 


dO5ACO “We AG 2E74 |. {T1}obj )objx.t 
005A 10: ooo ao00/ ext 

05a20: era 15 OEUO[SEFO Ow... pos ila ae: 
o0SA30: 0000 puo0 Cod 

oosAdG: ‘000 ata ap00 o900 o000 

OOSASO: 0000 coo 5403 5400 OcO0 

ooSAGO: 206 O0C 0000 0001 

OOSA70 : 00 0600 o000 

GOSAgD: ¢ O1OF GOEB o900 

OO5A90: o000 GOGO O000 

OOSAAO: o000 og00 CoD 

QO5ARO: oven 0000 

oosACO: ood coo 

oOSADO: coo ood 

OOSREO: oud ooo 

OOSAFO: 9000 D000 

OOSBO0: “9000 o000 

0058 10: 9000 Good 0000 C006 

005820: 9000 0000 odo 0000 


Short Virectery mae nied 
> File name length (1 byte: O-S!) | * Time stamp? (4) 


Ble name i. (31 by ter) Tre stang 3 (4) 


4 4) 
“Unknown (2 bytes) daw. 
- Time ¢tamp me by tor) -Sercal $ntaled 
* Flags ez) G bate) na 


* Original System Serial # C3 byte) 
-Unkawer (A bytes — 2 Stelds) 
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Buffer: 0000 FEdit screen of “after” LisaWrite install. 
Sector: 0020 
9AC4 260B 


Tags: 0002 0100 FFFS 0000 


OOSACO: fIP7B 5431 TDOF 626A OO7D GFO2 GATS 2E74 =. {Ti}otj.}objx.t 
GO5A10: 6578 7400 COO0 0000 9600 G000 DODD 0000 ext............. 


005AZ0: 0000 SCF9 ER2F 1401 0GRS 0015 OEGO 9CFO Fenn ier 
Q05AG0: BBC _AOFB 7B7E CFO 0000 0000 Eee _ ok 
oosAd0: gooofooe! zseB]oco0 010) o0G0 o0G0 O00 ....B;......... Zero out this fletd 
OO5ASO: 0000 O0O00 COO 0000 0COO 5403 S400 Ocoo Cw TT... (Ser # of sys in- 


OOSAGG: O000 OOOO 4E56 FEFC 206E CCOC GOnO OoOt =... NUL. nn... Stalled on. } 
GO5A7G: 0000 0000 COOO Go0N 000 HDD CODON oppo SCi«#.... 
OO5ABO: 0000 OOEB COOS 0001 0000 GIOF GOEB GOOO www... 
QO5A90: 0000 0000 C000 0000 0000 GOOD KONO DOGG Swiss 
QOSARO: 0000 GO00 COO0 0000 0000 D000 DODO OH00:SC«.... 
OUSABO: 0000 GOGO COBO O0CN 0000 O000 ODN GOOG... 
OOSACO: 0000 OOCO COBO 0000 0000 aoND Cate HOGG ww 
QOSADO: OG00 OGOO COBO 0000 0000 GOOD DOGO OOOO SC. 
QO5AEO: 0900 0000 CO00 0000 0000 GOGO COD0 Do00 Ct... 
GOSAFO: O000 0000 cooG 0000 oG0N OCOD DOGO OOOO... 
O05B00: 0000 B000 CO00 G000 0600 GO00 C000 GODDCw...w 
005810; 0900 0000 Codd cODO 0000 0000 

005B20: 0000 000G cocO CODD 0000 oo00 
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Written by David T. Craig 
71533. 606@compuserve. com 
07 September 1998 


TABLE OF CONTENTS 


1.0 DESERIALIZING LISA OFFICE SYSTEM 2.0 DISK 1 
2.0 DESERIALIZING LISA OFFICE SYSTEM 2.0 TOOLS 


1.0 DESERIALIZING LISA OFFICE SYSTEM 2.0 DISK 1 


The information in the document “Deserializing the Lisa Office 
System 3.0 Disk 1" should also work for Disk 1 of the Lisa Office 
System 2.0. | have looked at a LOS 2.0 disk 1 and the serial 
number information appears to be in the same location as for the 
LOS 3.0 disk 1. 


WARNING 
Make Certain you have made a backup copy of any 
Lisa disks that you plan to change with a block editor 
such as the FEDIT program. Apple's Macintosh 
program DISK COPY can make backup copies of Lisa 
disk images (this program may have trouble with 
400K disks with Mac OS 8 since this OS is not user 
friendly when it comes to 400K disks -- Apple 
assumes that nobody today has such disks except for 
[ancient Lisa computer owners :-) 
Here's a FEDIT window of LOS 2.0 Disk 1 showing the serial 
number area that should be cleared. Figure 1 shows that this LOS 
has been used on a Lisa with serial number 00011565. 


[Apple Lisa Computer Office System 2.0 Disk Deserialization = 1/3 | 
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iinternai Drive! 


Burt. Git 


bs OG 

7 Oo SFOG G01 OOO 4FFF OOCFF 

tela 9497 FINO 1804 Ob1d coon . salad = ATE 

( 6500 5379 7374 65b0 2037 Su. ice System | 2. 
6 O0FS {0FE oF? COBRA OOF? f 


Hos. CPOE 4EBR FF ?4 SOZE OO0R 0440 0020 6730 YOR. tO Bog 
Odd: Oddi O02 BPP F3d0 APSA 5540 BF2A SAG JB #g2SR gig _» 
OSA: OOF8 1 Goo 0000 0O00 GbOO FOIB 000 0000 
O86: OOO GOOD SCD ATOR OOOO Donn Hood OO 
- TAG E12 CN SFR Cn 319 ai 
» YOO) BO00 OOO tA ODD G01 Oo OSFL 
NOB 0001 OO00 G00? O24 DONS 0004 DOS 
0. Onde? Got OO ot ots GO00 Good O04 
QWBO: O04 C000 0005 0000 0000 0000 OO3S O04 
HOCK: Nd? 4h doen Dodd coOO ooo [HoT 163} 
OOO: Cue oO0e SOB 2801 C424 to OS00 oon 
OE: ate 10000 0000 0000 Sone coo food ooo 
Meo. oo of O00 O00R oot 
S700: 0000 O09 0000 44F7 OO Ao AO oo 
Obie D058 O0On Aogn Goo OoOnG 
99000 C0 OOo ooo og 


nooo 000 0000 


em 


Figure 1 
Lisa Office Systerm Disk 1 BEFORE deserialization. The 4 bytes 
bounded by the rectangle is this LOS’ serial number. 
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(Internal Drive) 


Buff: 0000 

Sect: GOIC 

Tags: ao00 : 00074 0000 4FFF OFF 

acoo: OcorF Figg 1601 0070 G000 134F 5666 3............ off 
O01: 69832 6520 S379 Ford GS00 203) 20ae ZESO ice System 1 2.0 
0020: CHEB GOOFS IDFE OOF? CABA OOF? Cho? GEOG 
0030: 2FOE FF?4 302E GO0R O440 0020 6730 
O040: 0440 0023 £792 S340 67S6 S540 & SF40 
OO80: 0007 O00 acon oO Ott Foe raat ae 
AOA: GOOO ooo aco4 Good acad 

Bo7d: GOOG OS17 OOOO OZFB GOGO 0315 OF18 G200 
HOt: O00 OOO C000 G12 cond G00) O000 C2FC 
0090: GOGO GO01 OOO Oot ooe4 cots Hots 
OOAG: 047 COC) Codd acct Oooo Gadd oOs4 
aoBO: o044 Good GOOS Oooo 0000 ooz3 bO04 
UCD: Od? CACC GOON HOOD cooE ooo [cond COOK] 
O000: 0000 GO02 SOG 2501 C424 

OOEO: CO00 C000 anc o00o Gt? agca aaa coad 
OOFO: 9300 H000 Bood ooO0 Got Oooo o000 oO0K 
aiod: gogo o900 C000 44F? Gooa Oooo Gdo0 ado 
C10: BS0E CD00 GOS0 0000 GOO Ob00 Hood Goo 
0120: 0020 CONE C000 Ono oocd Onod Coot oo0c 


Figure 2 
Lisa Office Systern Disk 1 AFTER deserialization. The 4 bytes 
bounded by the rectangle contain the LOS serial number and 
should be all zeros (00000000) when the disk is deserialized. 


2.0 DESERIALIZING LISA OFFICE SYSTEM 2.0 TOOLS 


I'm not 100% certain if the information in document "Apple Lisa 
7/7 Tool Deserialization" applies to LOS 2.0 tools such as LisaWrite. 
I bet it does but at the moment I don't have my LOS 2.0 tool 
disks handy (they're in a box that I haven't had the time to open 
yet). If the appropriate disk block of a LOS 2.0 tool disk looks like 
the disk block image in the Lisa 7/7 tool document then you should 
be safe. Remember to make a backup copy of your LOS disks 
before changing them at the block level. When I look at my LOS 
2.0 tool disks I will update this section appropriately. 


Special thanks to John Woodall who recently asked me about LOS 
2.0 and how to deserialize these disks. 


HHH 
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